Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e339ba4-36b5-44fd-a893-6219bedac76d.roa
File:                     0e339ba4-36b5-44fd-a893-6219bedac76d.roa (raw, json)
Hash identifier:          Wyp/pxgC/0dHTl6h6oolT3tOrDZHMOKNLaCcY7NkLbU=
Subject key identifier:   7D:87:EA:F0:AB:2A:55:B1:86:E0:F0:A0:C7:38:A4:21:50:18:0C:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0EE8DC3803015395754FC58FBB240AD3689FD48D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e339ba4-36b5-44fd-a893-6219bedac76d.roa
Signing time:             Tue 11 Nov 2025 02:20:10 +0000
ROA not before:           Tue 11 Nov 2025 02:20:10 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:74c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e8:dc:38:03:01:53:95:75:4f:c5:8f:bb:24:0a:d3:68:9f:d4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:20:10 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=bd06514e74a27eb56f6547deacc08d63bc16324867bad1a03c90c18d63b5d4b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:58:5e:3a:dc:41:54:ac:d6:ee:bc:12:ab:
                    52:33:ac:09:9a:24:11:90:66:6e:6a:f6:d4:a6:36:
                    22:b4:8c:50:db:0c:4d:2d:69:f2:3f:70:6c:ea:7f:
                    29:30:d3:5f:71:e8:a4:74:de:bb:63:f1:b9:62:c9:
                    c2:eb:5f:05:1d:d4:e7:56:9f:09:1e:c4:c9:5d:96:
                    53:63:6b:75:34:e3:8f:77:b5:f8:13:5b:4a:87:f1:
                    a3:86:a2:25:86:42:ef:5e:29:59:d1:dc:7a:3f:39:
                    0a:ed:75:1d:bd:7d:ea:cb:86:40:08:fc:91:85:28:
                    39:fb:9c:9c:15:06:f1:00:50:54:8d:c8:61:39:74:
                    a6:a2:81:36:89:a6:19:e3:b7:9b:73:16:a7:78:c0:
                    8b:27:af:25:c3:33:c9:fd:62:0b:c6:26:f6:bb:7b:
                    b4:5c:c8:74:6f:47:fc:af:ec:c4:fe:7f:8e:93:19:
                    3b:e3:40:8c:70:99:d2:3b:23:c6:75:91:61:f4:8c:
                    1c:21:8b:42:9d:46:6c:1b:3d:83:c1:01:f5:77:7f:
                    00:56:cf:ab:a1:a2:98:40:98:99:1b:16:a1:79:ba:
                    1c:88:6a:59:55:8e:7a:a0:38:a5:b0:a4:83:bc:69:
                    98:e5:78:83:07:36:f9:93:a0:21:51:5d:da:39:7d:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:87:EA:F0:AB:2A:55:B1:86:E0:F0:A0:C7:38:A4:21:50:18:0C:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e339ba4-36b5-44fd-a893-6219bedac76d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:74c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:51:0e:d7:90:77:48:77:b0:8f:6a:dc:ab:00:8f:a4:0e:b0:
         88:34:e9:f4:10:29:be:09:f9:50:31:15:ac:00:5c:f1:74:4a:
         ce:c4:bb:c3:6a:9a:9d:b3:82:8d:0f:4c:e0:90:f1:71:ac:15:
         56:6b:d2:ff:ef:2b:fe:a5:5f:c3:92:32:67:4e:b5:41:11:14:
         90:a9:67:37:c2:fc:14:6a:63:8d:c1:77:d8:51:17:7a:4a:0d:
         a4:7a:c9:c1:1e:7b:3f:d4:b4:07:ef:65:3d:d0:78:c8:9c:4d:
         41:a0:94:0d:f5:a3:11:d4:3a:9e:e4:97:73:cf:42:03:d5:7e:
         2b:3b:cc:79:e9:e8:0c:4c:ca:40:9f:48:a1:a2:11:a3:ee:c6:
         30:90:af:3e:4a:d1:0f:58:fa:36:e5:69:f9:bd:59:a7:3c:06:
         27:0e:88:71:c5:76:99:56:af:26:fe:4c:c3:80:79:2b:59:cb:
         5e:43:4e:36:b9:99:7d:82:45:db:9c:5e:71:9c:bf:e4:22:34:
         4b:96:8d:60:f6:b8:f5:9d:36:55:d1:45:a7:92:80:02:d5:29:
         fe:64:cd:c4:54:d8:01:eb:31:47:89:96:da:2f:69:16:76:bf:
         61:49:2d:af:7d:7d:b2:11:32:3b:27:54:b1:50:e3:50:dd:11:
         a3:7a:7d:3e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDujcOAMBU5V1T8WPuyQK02if1I0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDIyMDEwWhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BiZDA2NTE0ZTc0YTI3ZWI1NmY2NTQ3ZGVhY2MwOGQ2M2Jj
MTYzMjQ4NjdiYWQxYTAzYzkwYzE4ZDYzYjVkNGI5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDH8FheOtxBVKzW7rwSq1IzrAmaJBGQZm5q9tSmNiK0jFDb
DE0tafI/cGzqfykw019x6KR03rtj8bliycLrXwUd1OdWnwkexMldllNja3U04493
tfgTW0qH8aOGoiWGQu9eKVnR3Ho/OQrtdR29ferLhkAI/JGFKDn7nJwVBvEAUFSN
yGE5dKaigTaJphnjt5tzFqd4wIsnryXDM8n9YgvGJva7e7RcyHRvR/yv7MT+f46T
GTvjQIxwmdI7I8Z1kWH0jBwhi0KdRmwbPYPBAfV3fwBWz6uhophAmJkbFqF5uhyI
allVjnqgOKWwpIO8aZjleIMHNvmToCFRXdo5fQGPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUfYfq8KsqVbGG4PCgxzikIVAYDIAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBlMzM5YmE0LTM2YjUtNDRmZC1hODkzLTYyMTliZWRhYzc2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84dMAwDQYJKoZIhvcNAQELBQADggEBAKdRDteQd0h3sI9q3KsAj6QO
sIg06fQQKb4J+VAxFawAXPF0Ss7Eu8Nqmp2zgo0PTOCQ8XGsFVZr0v/vK/6lX8OS
MmdOtUERFJCpZzfC/BRqY43Bd9hRF3pKDaR6ycEeez/UtAfvZT3QeMicTUGglA31
oxHUOp7kl3PPQgPVfis7zHnp6AxMykCfSKGiEaPuxjCQrz5K0Q9Y+jblafm9Wac8
BicOiHHFdplWryb+TMOAeStZy15DTja5mX2CRducXnGcv+QiNEuWjWD2uPWdNlXR
RaeSgALVKf5kzcRU2AHrMUeJltovaRZ2v2FJLa99fbIRMjsnVLFQ41DdEaN6fT4=
-----END CERTIFICATE-----